So Far as I can convey to, the openssl confirm in the initial scenario will Test the chain and are unsuccessful, although the next only will Look at the chain in the signing-ca.crt to the basis (not needing the opposite certs, so just ignoring them) Good day! I am trying https://maps.app.goo.gl/9y4LfCmrsyYSbzTo6